./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:39:10,508 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:39:10,661 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:39:10,669 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:39:10,671 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:39:10,717 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:39:10,718 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:39:10,719 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:39:10,720 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:39:10,727 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:39:10,728 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:39:10,728 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:39:10,729 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:39:10,731 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:39:10,732 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:39:10,733 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:39:10,733 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:39:10,734 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:39:10,734 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:39:10,735 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:39:10,735 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:39:10,736 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:39:10,737 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:39:10,737 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:39:10,738 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:39:10,739 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:39:10,740 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:39:10,740 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:39:10,741 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:39:10,741 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:39:10,743 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:39:10,743 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:39:10,744 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:39:10,744 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:39:10,745 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:39:10,745 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:39:10,745 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:39:10,746 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:39:10,746 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:39:10,746 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f [2023-11-06 22:39:11,154 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:39:11,199 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:39:11,202 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:39:11,204 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:39:11,205 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:39:11,207 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2023-11-06 22:39:14,876 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:39:15,302 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:39:15,302 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2023-11-06 22:39:15,337 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/data/1c4a5ecf4/2b367d5c9817427dac0cf84cdaea80ee/FLAG83b7e369e [2023-11-06 22:39:15,363 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/data/1c4a5ecf4/2b367d5c9817427dac0cf84cdaea80ee [2023-11-06 22:39:15,371 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:39:15,375 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:39:15,379 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:39:15,381 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:39:15,389 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:39:15,390 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:39:15" (1/1) ... [2023-11-06 22:39:15,391 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2e656df4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:15, skipping insertion in model container [2023-11-06 22:39:15,392 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:39:15" (1/1) ... [2023-11-06 22:39:15,471 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:39:15,685 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2023-11-06 22:39:15,840 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:39:15,856 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:39:15,869 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-06 22:39:15,872 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [58] [2023-11-06 22:39:15,872 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [95] [2023-11-06 22:39:15,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [461] [2023-11-06 22:39:15,873 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [570] [2023-11-06 22:39:15,874 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [608] [2023-11-06 22:39:15,874 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [861] [2023-11-06 22:39:15,874 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [929] [2023-11-06 22:39:15,880 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2023-11-06 22:39:16,031 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:39:16,066 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:39:16,067 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16 WrapperNode [2023-11-06 22:39:16,067 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:39:16,069 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:39:16,069 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:39:16,069 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:39:16,079 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,115 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,186 INFO L138 Inliner]: procedures = 58, calls = 106, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 230 [2023-11-06 22:39:16,188 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:39:16,189 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:39:16,189 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:39:16,189 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:39:16,202 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,203 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,206 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,206 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,214 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,225 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,227 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,229 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,233 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:39:16,234 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:39:16,234 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:39:16,235 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:39:16,236 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (1/1) ... [2023-11-06 22:39:16,244 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:39:16,258 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:39:16,274 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:39:16,297 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:39:16,335 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:39:16,335 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:39:16,336 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:39:16,336 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:39:16,338 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:39:16,339 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:39:16,339 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:39:16,339 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:39:16,339 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:39:16,340 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:39:16,340 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:39:16,340 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:39:16,340 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:39:16,340 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:39:16,341 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:39:16,341 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:39:16,342 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:39:16,342 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:39:16,342 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:39:16,343 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:39:16,343 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:39:16,344 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:39:16,345 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:39:16,345 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:39:16,488 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:39:16,491 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:39:16,944 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:39:16,963 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:39:16,963 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:39:16,966 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:39:16 BoogieIcfgContainer [2023-11-06 22:39:16,966 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:39:16,970 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:39:16,970 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:39:16,974 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:39:16,975 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:39:15" (1/3) ... [2023-11-06 22:39:16,976 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f5c8cc3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:39:16, skipping insertion in model container [2023-11-06 22:39:16,976 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:39:16" (2/3) ... [2023-11-06 22:39:16,977 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f5c8cc3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:39:16, skipping insertion in model container [2023-11-06 22:39:16,977 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:39:16" (3/3) ... [2023-11-06 22:39:16,979 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product62.cil.c [2023-11-06 22:39:17,001 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:39:17,001 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:39:17,073 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:39:17,082 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@418f8411, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:39:17,082 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:39:17,088 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 22:39:17,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:39:17,103 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:17,104 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:17,105 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:17,112 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:17,112 INFO L85 PathProgramCache]: Analyzing trace with hash 1444919738, now seen corresponding path program 1 times [2023-11-06 22:39:17,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:17,125 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [980520247] [2023-11-06 22:39:17,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:17,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:17,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:17,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:39:17,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:17,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:17,582 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:17,583 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [980520247] [2023-11-06 22:39:17,584 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [980520247] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:17,584 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:17,585 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:39:17,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128583829] [2023-11-06 22:39:17,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:17,594 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:39:17,594 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:17,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:39:17,634 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:39:17,638 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:39:17,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:17,693 INFO L93 Difference]: Finished difference Result 214 states and 289 transitions. [2023-11-06 22:39:17,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:39:17,697 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:39:17,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:17,708 INFO L225 Difference]: With dead ends: 214 [2023-11-06 22:39:17,708 INFO L226 Difference]: Without dead ends: 102 [2023-11-06 22:39:17,713 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:39:17,718 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:17,719 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:39:17,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2023-11-06 22:39:17,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2023-11-06 22:39:17,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-06 22:39:17,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2023-11-06 22:39:17,776 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2023-11-06 22:39:17,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:17,777 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2023-11-06 22:39:17,777 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:39:17,777 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2023-11-06 22:39:17,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:39:17,781 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:17,782 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:17,782 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:39:17,782 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:17,783 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:17,784 INFO L85 PathProgramCache]: Analyzing trace with hash 1097025375, now seen corresponding path program 1 times [2023-11-06 22:39:17,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:17,784 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [502322072] [2023-11-06 22:39:17,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:17,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:17,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:17,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:39:17,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:17,952 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:17,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:17,953 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [502322072] [2023-11-06 22:39:17,953 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [502322072] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:17,954 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:17,954 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:39:17,954 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660420447] [2023-11-06 22:39:17,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:17,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:39:17,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:17,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:39:17,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:39:17,959 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:39:17,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:17,993 INFO L93 Difference]: Finished difference Result 169 states and 219 transitions. [2023-11-06 22:39:17,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:39:17,994 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:39:17,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:17,998 INFO L225 Difference]: With dead ends: 169 [2023-11-06 22:39:17,998 INFO L226 Difference]: Without dead ends: 93 [2023-11-06 22:39:18,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:39:18,002 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:18,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:39:18,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2023-11-06 22:39:18,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2023-11-06 22:39:18,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:39:18,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2023-11-06 22:39:18,025 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2023-11-06 22:39:18,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:18,026 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2023-11-06 22:39:18,026 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:39:18,026 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2023-11-06 22:39:18,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:39:18,029 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:18,029 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:18,029 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:39:18,030 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:18,031 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:18,031 INFO L85 PathProgramCache]: Analyzing trace with hash 2131311946, now seen corresponding path program 1 times [2023-11-06 22:39:18,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:18,032 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [522197920] [2023-11-06 22:39:18,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:18,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:18,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:39:18,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:18,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:18,328 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [522197920] [2023-11-06 22:39:18,328 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [522197920] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:18,328 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:18,329 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:39:18,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522191449] [2023-11-06 22:39:18,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:18,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:39:18,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:18,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:39:18,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:39:18,332 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:39:18,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:18,426 INFO L93 Difference]: Finished difference Result 179 states and 234 transitions. [2023-11-06 22:39:18,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:39:18,428 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:39:18,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:18,430 INFO L225 Difference]: With dead ends: 179 [2023-11-06 22:39:18,431 INFO L226 Difference]: Without dead ends: 93 [2023-11-06 22:39:18,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:39:18,434 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 145 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:18,435 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 307 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:39:18,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2023-11-06 22:39:18,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2023-11-06 22:39:18,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:39:18,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2023-11-06 22:39:18,479 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2023-11-06 22:39:18,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:18,480 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2023-11-06 22:39:18,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:39:18,480 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2023-11-06 22:39:18,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 22:39:18,484 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:18,484 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:18,485 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:39:18,485 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:18,486 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:18,486 INFO L85 PathProgramCache]: Analyzing trace with hash 394218810, now seen corresponding path program 1 times [2023-11-06 22:39:18,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:18,487 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090140890] [2023-11-06 22:39:18,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:18,487 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:18,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:39:18,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:18,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:18,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:39:18,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:18,814 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:18,814 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:18,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090140890] [2023-11-06 22:39:18,815 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090140890] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:18,817 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:18,817 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:39:18,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1444864433] [2023-11-06 22:39:18,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:18,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:39:18,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:18,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:39:18,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:39:18,822 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:39:19,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:19,252 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2023-11-06 22:39:19,253 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:39:19,253 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2023-11-06 22:39:19,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:19,267 INFO L225 Difference]: With dead ends: 271 [2023-11-06 22:39:19,270 INFO L226 Difference]: Without dead ends: 185 [2023-11-06 22:39:19,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:39:19,277 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 232 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:19,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [234 Valid, 322 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:39:19,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2023-11-06 22:39:19,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2023-11-06 22:39:19,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.2481203007518797) internal successors, (166), 142 states have internal predecessors, (166), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2023-11-06 22:39:19,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 217 transitions. [2023-11-06 22:39:19,326 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 217 transitions. Word has length 46 [2023-11-06 22:39:19,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:19,326 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 217 transitions. [2023-11-06 22:39:19,327 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:39:19,327 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 217 transitions. [2023-11-06 22:39:19,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-06 22:39:19,330 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:19,330 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:19,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:39:19,331 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:19,332 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:19,332 INFO L85 PathProgramCache]: Analyzing trace with hash 1565999890, now seen corresponding path program 1 times [2023-11-06 22:39:19,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:19,333 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325018077] [2023-11-06 22:39:19,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:19,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:19,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:19,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:39:19,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:19,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:19,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:19,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:19,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:19,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 22:39:19,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:19,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:19,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:19,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325018077] [2023-11-06 22:39:19,626 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325018077] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:19,627 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:19,627 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:39:19,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [273238587] [2023-11-06 22:39:19,629 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:19,630 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:39:19,630 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:19,631 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:39:19,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:39:19,631 INFO L87 Difference]: Start difference. First operand 179 states and 217 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:39:20,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:20,113 INFO L93 Difference]: Finished difference Result 458 states and 576 transitions. [2023-11-06 22:39:20,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:39:20,115 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2023-11-06 22:39:20,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:20,125 INFO L225 Difference]: With dead ends: 458 [2023-11-06 22:39:20,126 INFO L226 Difference]: Without dead ends: 286 [2023-11-06 22:39:20,128 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:39:20,138 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 159 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:20,139 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 409 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:39:20,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2023-11-06 22:39:20,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 278. [2023-11-06 22:39:20,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 207 states have (on average 1.2367149758454106) internal successors, (256), 219 states have internal predecessors, (256), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2023-11-06 22:39:20,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 339 transitions. [2023-11-06 22:39:20,248 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 339 transitions. Word has length 52 [2023-11-06 22:39:20,251 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:20,251 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 339 transitions. [2023-11-06 22:39:20,251 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:39:20,252 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 339 transitions. [2023-11-06 22:39:20,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:39:20,257 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:20,257 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:20,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:39:20,258 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:20,258 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:20,258 INFO L85 PathProgramCache]: Analyzing trace with hash 862642872, now seen corresponding path program 1 times [2023-11-06 22:39:20,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:20,259 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1356330814] [2023-11-06 22:39:20,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:20,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:20,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:20,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:20,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:20,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:39:20,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:20,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:20,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:20,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:20,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:20,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 22:39:20,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:20,509 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:20,510 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:20,510 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1356330814] [2023-11-06 22:39:20,510 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1356330814] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:20,510 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:20,511 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:39:20,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2129624553] [2023-11-06 22:39:20,511 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:20,512 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:39:20,512 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:20,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:39:20,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:39:20,513 INFO L87 Difference]: Start difference. First operand 278 states and 339 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 6 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 22:39:21,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:21,481 INFO L93 Difference]: Finished difference Result 674 states and 860 transitions. [2023-11-06 22:39:21,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-11-06 22:39:21,482 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 6 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 56 [2023-11-06 22:39:21,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:21,489 INFO L225 Difference]: With dead ends: 674 [2023-11-06 22:39:21,490 INFO L226 Difference]: Without dead ends: 502 [2023-11-06 22:39:21,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2023-11-06 22:39:21,495 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 447 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 181 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 452 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 577 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:21,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [452 Valid, 320 Invalid, 577 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:39:21,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2023-11-06 22:39:21,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 464. [2023-11-06 22:39:21,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.215743440233236) internal successors, (417), 365 states have internal predecessors, (417), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2023-11-06 22:39:21,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 572 transitions. [2023-11-06 22:39:21,634 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 572 transitions. Word has length 56 [2023-11-06 22:39:21,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:21,634 INFO L495 AbstractCegarLoop]: Abstraction has 464 states and 572 transitions. [2023-11-06 22:39:21,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 6 states have internal predecessors, (45), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 22:39:21,635 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 572 transitions. [2023-11-06 22:39:21,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:39:21,643 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:21,644 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:21,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:39:21,644 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:21,645 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:21,645 INFO L85 PathProgramCache]: Analyzing trace with hash 924682486, now seen corresponding path program 1 times [2023-11-06 22:39:21,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:21,645 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092120620] [2023-11-06 22:39:21,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:21,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:21,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:21,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:21,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:21,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:39:21,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:21,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:21,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:21,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:21,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:21,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 22:39:21,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:21,801 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:21,801 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:21,802 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2092120620] [2023-11-06 22:39:21,802 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2092120620] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:21,802 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:21,802 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:39:21,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1415583947] [2023-11-06 22:39:21,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:21,804 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:39:21,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:21,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:39:21,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:39:21,805 INFO L87 Difference]: Start difference. First operand 464 states and 572 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:39:22,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:22,306 INFO L93 Difference]: Finished difference Result 836 states and 1036 transitions. [2023-11-06 22:39:22,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:39:22,307 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2023-11-06 22:39:22,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:22,314 INFO L225 Difference]: With dead ends: 836 [2023-11-06 22:39:22,315 INFO L226 Difference]: Without dead ends: 474 [2023-11-06 22:39:22,317 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:39:22,322 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 165 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 321 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 321 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:22,322 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 285 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 321 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:39:22,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 474 states. [2023-11-06 22:39:22,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 474 to 464. [2023-11-06 22:39:22,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.2128279883381925) internal successors, (416), 365 states have internal predecessors, (416), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2023-11-06 22:39:22,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 571 transitions. [2023-11-06 22:39:22,421 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 571 transitions. Word has length 56 [2023-11-06 22:39:22,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:22,423 INFO L495 AbstractCegarLoop]: Abstraction has 464 states and 571 transitions. [2023-11-06 22:39:22,423 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:39:22,423 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 571 transitions. [2023-11-06 22:39:22,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:39:22,424 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:22,425 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:22,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:39:22,427 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:22,431 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:22,431 INFO L85 PathProgramCache]: Analyzing trace with hash 790668980, now seen corresponding path program 1 times [2023-11-06 22:39:22,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:22,431 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [598378242] [2023-11-06 22:39:22,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:22,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:22,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:22,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:22,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:22,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:39:22,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:22,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:22,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:22,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:22,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:22,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 22:39:22,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:22,652 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:22,653 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:22,653 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [598378242] [2023-11-06 22:39:22,653 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [598378242] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:22,653 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:22,654 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:39:22,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279875670] [2023-11-06 22:39:22,654 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:22,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:39:22,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:22,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:39:22,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:39:22,657 INFO L87 Difference]: Start difference. First operand 464 states and 571 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:39:23,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:23,312 INFO L93 Difference]: Finished difference Result 950 states and 1185 transitions. [2023-11-06 22:39:23,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:39:23,313 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2023-11-06 22:39:23,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:23,319 INFO L225 Difference]: With dead ends: 950 [2023-11-06 22:39:23,320 INFO L226 Difference]: Without dead ends: 493 [2023-11-06 22:39:23,322 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=160, Unknown=0, NotChecked=0, Total=210 [2023-11-06 22:39:23,324 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 213 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:23,325 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [216 Valid, 431 Invalid, 622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 22:39:23,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2023-11-06 22:39:23,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 467. [2023-11-06 22:39:23,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 467 states, 348 states have (on average 1.206896551724138) internal successors, (420), 369 states have internal predecessors, (420), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2023-11-06 22:39:23,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 467 states to 467 states and 573 transitions. [2023-11-06 22:39:23,415 INFO L78 Accepts]: Start accepts. Automaton has 467 states and 573 transitions. Word has length 56 [2023-11-06 22:39:23,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:23,415 INFO L495 AbstractCegarLoop]: Abstraction has 467 states and 573 transitions. [2023-11-06 22:39:23,416 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:39:23,416 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 573 transitions. [2023-11-06 22:39:23,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-06 22:39:23,418 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:23,419 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:23,419 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:39:23,419 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:23,420 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:23,420 INFO L85 PathProgramCache]: Analyzing trace with hash -1116274415, now seen corresponding path program 1 times [2023-11-06 22:39:23,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:23,420 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [737167996] [2023-11-06 22:39:23,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:23,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:23,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:23,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:39:23,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:23,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:23,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:39:23,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-06 22:39:23,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:23,865 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:39:23,865 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:23,865 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [737167996] [2023-11-06 22:39:23,865 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [737167996] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:39:23,866 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [747275291] [2023-11-06 22:39:23,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:23,866 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:39:23,867 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:39:23,871 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:39:23,884 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:39:23,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:24,001 INFO L262 TraceCheckSpWp]: Trace formula consists of 251 conjuncts, 17 conjunts are in the unsatisfiable core [2023-11-06 22:39:24,010 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:39:24,303 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:39:24,303 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:39:24,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [747275291] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:24,304 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:39:24,304 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2023-11-06 22:39:24,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [77611504] [2023-11-06 22:39:24,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:24,307 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:39:24,307 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:24,308 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:39:24,308 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:39:24,309 INFO L87 Difference]: Start difference. First operand 467 states and 573 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:39:24,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:24,637 INFO L93 Difference]: Finished difference Result 1368 states and 1709 transitions. [2023-11-06 22:39:24,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:39:24,638 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2023-11-06 22:39:24,638 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:24,646 INFO L225 Difference]: With dead ends: 1368 [2023-11-06 22:39:24,646 INFO L226 Difference]: Without dead ends: 908 [2023-11-06 22:39:24,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:39:24,650 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 70 mSDsluCounter, 515 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 631 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:24,650 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 631 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:39:24,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 908 states. [2023-11-06 22:39:24,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 908 to 906. [2023-11-06 22:39:24,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1961367013372957) internal successors, (805), 711 states have internal predecessors, (805), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (189), 123 states have call predecessors, (189), 117 states have call successors, (189) [2023-11-06 22:39:24,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1111 transitions. [2023-11-06 22:39:24,811 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1111 transitions. Word has length 65 [2023-11-06 22:39:24,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:24,811 INFO L495 AbstractCegarLoop]: Abstraction has 906 states and 1111 transitions. [2023-11-06 22:39:24,812 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:39:24,812 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1111 transitions. [2023-11-06 22:39:24,815 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2023-11-06 22:39:24,815 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:24,815 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:24,823 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-06 22:39:25,022 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-06 22:39:25,023 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:25,023 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:25,024 INFO L85 PathProgramCache]: Analyzing trace with hash -930662327, now seen corresponding path program 1 times [2023-11-06 22:39:25,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:25,024 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1054039476] [2023-11-06 22:39:25,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:25,025 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:25,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:25,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:39:25,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:25,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:25,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:39:25,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-06 22:39:25,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:25,202 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:39:25,202 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:25,202 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1054039476] [2023-11-06 22:39:25,202 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1054039476] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:25,203 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:25,203 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:39:25,203 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [859030594] [2023-11-06 22:39:25,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:25,204 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:39:25,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:25,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:39:25,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:39:25,205 INFO L87 Difference]: Start difference. First operand 906 states and 1111 transitions. Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:39:25,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:25,891 INFO L93 Difference]: Finished difference Result 1819 states and 2228 transitions. [2023-11-06 22:39:25,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-06 22:39:25,892 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2023-11-06 22:39:25,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:25,900 INFO L225 Difference]: With dead ends: 1819 [2023-11-06 22:39:25,900 INFO L226 Difference]: Without dead ends: 920 [2023-11-06 22:39:25,905 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2023-11-06 22:39:25,906 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 246 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 468 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 542 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 468 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:25,906 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [249 Valid, 461 Invalid, 542 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 468 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:39:25,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 920 states. [2023-11-06 22:39:26,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 920 to 906. [2023-11-06 22:39:26,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1812778603268945) internal successors, (795), 711 states have internal predecessors, (795), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (174), 123 states have call predecessors, (174), 117 states have call successors, (174) [2023-11-06 22:39:26,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1086 transitions. [2023-11-06 22:39:26,035 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1086 transitions. Word has length 66 [2023-11-06 22:39:26,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:26,036 INFO L495 AbstractCegarLoop]: Abstraction has 906 states and 1086 transitions. [2023-11-06 22:39:26,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:39:26,037 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1086 transitions. [2023-11-06 22:39:26,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-06 22:39:26,040 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:26,040 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:26,040 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-06 22:39:26,040 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:26,041 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:26,041 INFO L85 PathProgramCache]: Analyzing trace with hash 1947456301, now seen corresponding path program 1 times [2023-11-06 22:39:26,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:26,042 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [364814374] [2023-11-06 22:39:26,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:26,042 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:26,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:26,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:39:26,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:39:26,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:26,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:26,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:39:26,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-06 22:39:26,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:26,277 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:39:26,278 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:26,278 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [364814374] [2023-11-06 22:39:26,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [364814374] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:39:26,278 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:39:26,279 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-06 22:39:26,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [632454000] [2023-11-06 22:39:26,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:39:26,280 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 22:39:26,280 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:26,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 22:39:26,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:39:26,281 INFO L87 Difference]: Start difference. First operand 906 states and 1086 transitions. Second operand has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 22:39:28,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:28,222 INFO L93 Difference]: Finished difference Result 1784 states and 2156 transitions. [2023-11-06 22:39:28,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:39:28,223 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 69 [2023-11-06 22:39:28,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:28,231 INFO L225 Difference]: With dead ends: 1784 [2023-11-06 22:39:28,232 INFO L226 Difference]: Without dead ends: 885 [2023-11-06 22:39:28,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2023-11-06 22:39:28,237 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 346 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 1721 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 347 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 1858 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 1721 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:28,238 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [347 Valid, 314 Invalid, 1858 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 1721 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2023-11-06 22:39:28,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 885 states. [2023-11-06 22:39:28,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 885 to 874. [2023-11-06 22:39:28,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 874 states, 641 states have (on average 1.1528861154446177) internal successors, (739), 679 states have internal predecessors, (739), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (168), 123 states have call predecessors, (168), 117 states have call successors, (168) [2023-11-06 22:39:28,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1024 transitions. [2023-11-06 22:39:28,364 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1024 transitions. Word has length 69 [2023-11-06 22:39:28,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:28,365 INFO L495 AbstractCegarLoop]: Abstraction has 874 states and 1024 transitions. [2023-11-06 22:39:28,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 22:39:28,365 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1024 transitions. [2023-11-06 22:39:28,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2023-11-06 22:39:28,377 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:39:28,378 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:28,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-06 22:39:28,378 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:39:28,380 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:39:28,380 INFO L85 PathProgramCache]: Analyzing trace with hash 20560600, now seen corresponding path program 1 times [2023-11-06 22:39:28,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:39:28,381 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [709499672] [2023-11-06 22:39:28,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:28,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:39:28,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:28,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:39:28,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:28,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:39:28,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:28,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:39:28,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:28,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:39:28,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:39:29,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:39:29,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:39:29,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2023-11-06 22:39:29,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:39:29,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2023-11-06 22:39:29,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2023-11-06 22:39:29,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,223 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 2 proven. 21 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-06 22:39:29,223 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:39:29,223 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [709499672] [2023-11-06 22:39:29,224 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [709499672] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:39:29,224 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [205079803] [2023-11-06 22:39:29,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:39:29,224 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:39:29,225 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:39:29,226 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:39:29,242 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:39:29,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:39:29,380 INFO L262 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-06 22:39:29,393 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:39:29,640 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 22:39:29,641 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:39:30,057 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-11-06 22:39:30,058 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [205079803] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:39:30,058 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:39:30,058 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 8, 9] total 25 [2023-11-06 22:39:30,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2050364760] [2023-11-06 22:39:30,059 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:39:30,060 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-06 22:39:30,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:39:30,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-06 22:39:30,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=83, Invalid=517, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:39:30,063 INFO L87 Difference]: Start difference. First operand 874 states and 1024 transitions. Second operand has 25 states, 25 states have (on average 5.04) internal successors, (126), 18 states have internal predecessors, (126), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2023-11-06 22:39:33,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:39:33,575 INFO L93 Difference]: Finished difference Result 1805 states and 2185 transitions. [2023-11-06 22:39:33,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2023-11-06 22:39:33,576 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 5.04) internal successors, (126), 18 states have internal predecessors, (126), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 107 [2023-11-06 22:39:33,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:39:33,578 INFO L225 Difference]: With dead ends: 1805 [2023-11-06 22:39:33,578 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:39:33,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 237 SyntacticMatches, 7 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2717 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=2025, Invalid=6905, Unknown=0, NotChecked=0, Total=8930 [2023-11-06 22:39:33,591 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 1454 mSDsluCounter, 676 mSDsCounter, 0 mSdLazyCounter, 1251 mSolverCounterSat, 591 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1457 SdHoareTripleChecker+Valid, 728 SdHoareTripleChecker+Invalid, 1842 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 591 IncrementalHoareTripleChecker+Valid, 1251 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2023-11-06 22:39:33,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1457 Valid, 728 Invalid, 1842 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [591 Valid, 1251 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2023-11-06 22:39:33,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:39:33,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:39:33,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:39:33,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:39:33,594 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 107 [2023-11-06 22:39:33,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:39:33,594 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:39:33,594 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 5.04) internal successors, (126), 18 states have internal predecessors, (126), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2023-11-06 22:39:33,595 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:39:33,595 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:39:33,598 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:39:33,606 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:39:33,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-06 22:39:33,808 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:39:42,258 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 751 758) no Hoare annotation was computed. [2023-11-06 22:39:42,259 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 751 758) the Hoare annotation is: (let ((.cse0 (< 1 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1) .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3))) [2023-11-06 22:39:42,259 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 751 758) no Hoare annotation was computed. [2023-11-06 22:39:42,260 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2023-11-06 22:39:42,260 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2023-11-06 22:39:42,260 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse4 (< 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse2) (or .cse4 .cse5 .cse6 .cse2 .cse3) (or .cse0 .cse7 .cse1 .cse2))) [2023-11-06 22:39:42,261 INFO L899 garLoopResultBuilder]: For program point L694-1(lines 675 699) no Hoare annotation was computed. [2023-11-06 22:39:42,261 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 561 569) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse6 .cse7 .cse2) (or .cse0 .cse7 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,261 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2023-11-06 22:39:42,262 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 675 699) the Hoare annotation is: (let ((.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (< 1 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8 .cse2) (or .cse5 .cse6 .cse7 .cse2 .cse3) (or .cse0 .cse8 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,262 INFO L899 garLoopResultBuilder]: For program point L843-2(lines 843 847) no Hoare annotation was computed. [2023-11-06 22:39:42,262 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 834 852) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse6 .cse7 .cse2) (or .cse0 .cse7 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,263 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse6 .cse7 .cse2) (or .cse0 .cse7 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,263 INFO L895 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse6 .cse7 .cse2) (or .cse0 .cse7 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,264 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 675 699) no Hoare annotation was computed. [2023-11-06 22:39:42,264 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2023-11-06 22:39:42,264 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2023-11-06 22:39:42,264 INFO L899 garLoopResultBuilder]: For program point L498-1(lines 494 505) no Hoare annotation was computed. [2023-11-06 22:39:42,265 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 494 505) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 1))) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (< 2 ~waterLevel~0)) (.cse7 (not (= ~pumpRunning~0 0))) (.cse5 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse6 (< |old(~methaneLevelCritical~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse2 .cse4) (or .cse0 .cse7 .cse5 .cse6 .cse4))) [2023-11-06 22:39:42,265 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 494 505) no Hoare annotation was computed. [2023-11-06 22:39:42,265 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 931 960) no Hoare annotation was computed. [2023-11-06 22:39:42,265 INFO L902 garLoopResultBuilder]: At program point L956(lines 931 960) the Hoare annotation is: true [2023-11-06 22:39:42,266 INFO L899 garLoopResultBuilder]: For program point L952(line 952) no Hoare annotation was computed. [2023-11-06 22:39:42,266 INFO L899 garLoopResultBuilder]: For program point L945(lines 945 949) no Hoare annotation was computed. [2023-11-06 22:39:42,266 INFO L902 garLoopResultBuilder]: At program point L945-1(lines 945 949) the Hoare annotation is: true [2023-11-06 22:39:42,266 INFO L899 garLoopResultBuilder]: For program point L942(line 942) no Hoare annotation was computed. [2023-11-06 22:39:42,267 INFO L902 garLoopResultBuilder]: At program point L941-2(lines 941 955) the Hoare annotation is: true [2023-11-06 22:39:42,267 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 931 960) the Hoare annotation is: true [2023-11-06 22:39:42,267 INFO L902 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: true [2023-11-06 22:39:42,267 INFO L899 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2023-11-06 22:39:42,267 INFO L899 garLoopResultBuilder]: For program point L81(lines 81 87) no Hoare annotation was computed. [2023-11-06 22:39:42,268 INFO L899 garLoopResultBuilder]: For program point L77(lines 77 90) no Hoare annotation was computed. [2023-11-06 22:39:42,268 INFO L895 garLoopResultBuilder]: At program point L77-1(lines 62 94) the Hoare annotation is: (let ((.cse11 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse13 (= |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse2 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (not .cse4)) (.cse15 (= ~pumpRunning~0 1)) (.cse16 (not .cse13)) (.cse8 (< 2 |old(~waterLevel~0)|)) (.cse9 (< ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (not .cse11))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse0 (and .cse5 .cse6 .cse7) .cse4 .cse8 .cse9) (or (and .cse5 .cse10 .cse1 .cse11 .cse12 .cse2) (and .cse10 .cse1 .cse13 .cse11 .cse12 .cse2 .cse14 .cse15) .cse3 .cse16 .cse4 .cse8) (or (and .cse11 .cse6 .cse15) .cse0 .cse3 (and .cse5 .cse10 .cse11 .cse6) .cse4 .cse8) (or (and .cse10 .cse13 .cse12 .cse7 .cse14 .cse15) .cse16 .cse4 .cse8 .cse9 (and .cse5 .cse10 .cse12 .cse7))))) [2023-11-06 22:39:42,269 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2023-11-06 22:39:42,269 INFO L899 garLoopResultBuilder]: For program point L709(lines 709 717) no Hoare annotation was computed. [2023-11-06 22:39:42,269 INFO L895 garLoopResultBuilder]: At program point L69(line 69) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 1))) (let ((.cse8 (and .cse1 .cse12 .cse7)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (and .cse0 .cse1 .cse12)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (< 2 |old(~waterLevel~0)|)) (.cse11 (< ~methaneLevelCritical~0 1))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6 (and .cse2 .cse7)) (or .cse8 .cse9 .cse10 .cse5 .cse6 .cse11) (or .cse8 .cse4 .cse9 .cse10 .cse5 .cse6) (or .cse3 (and .cse0 .cse2) .cse5 .cse6 .cse11)))) [2023-11-06 22:39:42,270 INFO L899 garLoopResultBuilder]: For program point L69-1(line 69) no Hoare annotation was computed. [2023-11-06 22:39:42,270 INFO L899 garLoopResultBuilder]: For program point L705(lines 705 722) no Hoare annotation was computed. [2023-11-06 22:39:42,270 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 478) no Hoare annotation was computed. [2023-11-06 22:39:42,271 INFO L895 garLoopResultBuilder]: At program point L474-2(lines 470 481) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1 .cse2) (or .cse4 .cse6 .cse1 .cse2 .cse3) (or .cse0 .cse5 .cse1 .cse2))) [2023-11-06 22:39:42,271 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 538 546) the Hoare annotation is: (let ((.cse3 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse10 (= ~pumpRunning~0 1)) (.cse11 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse4 .cse5) (let ((.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 .cse6 (and .cse7 .cse8 .cse9 .cse3 .cse10) .cse2 .cse4 (and .cse11 .cse7 .cse8 .cse9 .cse3))) (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse8 .cse12 .cse10) .cse0 .cse1 (and .cse11 .cse7 .cse8 .cse12) .cse2 .cse4)) (or .cse6 .cse2 .cse4 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)))) [2023-11-06 22:39:42,272 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-06 22:39:42,272 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2023-11-06 22:39:42,272 INFO L895 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1 .cse2) (or .cse4 .cse6 .cse1 .cse2 .cse3) (or .cse0 .cse5 .cse1 .cse2))) [2023-11-06 22:39:42,273 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 50 57) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2) (or .cse5 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse2))) [2023-11-06 22:39:42,273 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 617 640) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse7 (< ~methaneLevelCritical~0 1)) (.cse4 (and .cse8 (= ~pumpRunning~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse3 .cse7) (or .cse1 .cse2 .cse3 .cse7 .cse4)))) [2023-11-06 22:39:42,274 INFO L895 garLoopResultBuilder]: At program point L711(line 711) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1 .cse2) (or .cse4 .cse6 .cse1 .cse2 .cse3) (or .cse0 .cse5 .cse1 .cse2))) [2023-11-06 22:39:42,274 INFO L899 garLoopResultBuilder]: For program point L71(lines 71 91) no Hoare annotation was computed. [2023-11-06 22:39:42,274 INFO L895 garLoopResultBuilder]: At program point L707(line 707) the Hoare annotation is: (let ((.cse4 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1 .cse2) (or .cse4 .cse6 .cse1 .cse2 .cse3) (or .cse0 .cse5 .cse1 .cse2))) [2023-11-06 22:39:42,274 INFO L899 garLoopResultBuilder]: For program point L707-1(line 707) no Hoare annotation was computed. [2023-11-06 22:39:42,275 INFO L895 garLoopResultBuilder]: At program point L720(line 720) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse2 .cse3) (or .cse1 .cse2 .cse3 .cse6) (or .cse4 .cse5 .cse2 .cse3 .cse6))) [2023-11-06 22:39:42,275 INFO L895 garLoopResultBuilder]: At program point L720-1(lines 701 725) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 1))) (let ((.cse8 (and .cse1 .cse12 .cse7)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (and .cse0 .cse1 .cse12)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (< 2 |old(~waterLevel~0)|)) (.cse11 (< ~methaneLevelCritical~0 1))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6 (and .cse2 .cse7)) (or .cse8 .cse9 .cse10 .cse5 .cse6 .cse11) (or .cse8 .cse4 .cse9 .cse10 .cse5 .cse6) (or .cse3 (and .cse0 .cse2) .cse5 .cse6 .cse11)))) [2023-11-06 22:39:42,276 INFO L899 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2023-11-06 22:39:42,276 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2023-11-06 22:39:42,276 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 770 778) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 (and (= |timeShift_isPumpRunning_#res#1| 1) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse1 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse4 .cse1) (or .cse4 .cse5 .cse1 .cse2) (or .cse5 .cse1 .cse2 .cse3))) [2023-11-06 22:39:42,277 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-06 22:39:42,277 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 506 514) the Hoare annotation is: true [2023-11-06 22:39:42,277 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 506 514) no Hoare annotation was computed. [2023-11-06 22:39:42,277 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 506 514) no Hoare annotation was computed. [2023-11-06 22:39:42,278 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 853 860) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8))) [2023-11-06 22:39:42,278 INFO L899 garLoopResultBuilder]: For program point L911(lines 911 915) no Hoare annotation was computed. [2023-11-06 22:39:42,278 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 992 1001) the Hoare annotation is: true [2023-11-06 22:39:42,279 INFO L895 garLoopResultBuilder]: At program point L911-2(lines 903 916) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8))) [2023-11-06 22:39:42,279 INFO L899 garLoopResultBuilder]: For program point L874(lines 873 920) no Hoare annotation was computed. [2023-11-06 22:39:42,279 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 585 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:39:42,279 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 1002 1024) the Hoare annotation is: true [2023-11-06 22:39:42,280 INFO L899 garLoopResultBuilder]: For program point L903(lines 903 916) no Hoare annotation was computed. [2023-11-06 22:39:42,280 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:39:42,280 INFO L895 garLoopResultBuilder]: At program point L895(line 895) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8))) [2023-11-06 22:39:42,280 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:39:42,280 INFO L902 garLoopResultBuilder]: At program point L924(lines 863 928) the Hoare annotation is: true [2023-11-06 22:39:42,281 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2023-11-06 22:39:42,281 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2023-11-06 22:39:42,281 INFO L899 garLoopResultBuilder]: For program point L875(lines 875 879) no Hoare annotation was computed. [2023-11-06 22:39:42,281 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 985 991) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~11#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:39:42,282 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:39:42,282 INFO L895 garLoopResultBuilder]: At program point L921(lines 872 922) the Hoare annotation is: false [2023-11-06 22:39:42,282 INFO L899 garLoopResultBuilder]: For program point L1012(lines 1012 1019) no Hoare annotation was computed. [2023-11-06 22:39:42,282 INFO L899 garLoopResultBuilder]: For program point L1012-2(lines 1012 1019) no Hoare annotation was computed. [2023-11-06 22:39:42,282 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:39:42,283 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 592 598) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:39:42,283 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 899) no Hoare annotation was computed. [2023-11-06 22:39:42,283 INFO L899 garLoopResultBuilder]: For program point L893-1(lines 893 899) no Hoare annotation was computed. [2023-11-06 22:39:42,283 INFO L895 garLoopResultBuilder]: At program point L918(lines 873 920) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= ~waterLevel~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0))) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse8 .cse4 .cse6) (and .cse1 .cse2 .cse3 .cse8 .cse4 .cse6 .cse9) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse9))) [2023-11-06 22:39:42,284 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= ~waterLevel~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0))) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse8 .cse4 .cse6) (and .cse1 .cse2 .cse3 .cse8 .cse4 .cse6 .cse9) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6 .cse9))) [2023-11-06 22:39:42,284 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 599 607) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:39:42,284 INFO L899 garLoopResultBuilder]: For program point L824(lines 824 828) no Hoare annotation was computed. [2023-11-06 22:39:42,285 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (< 1 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse6 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 .cse6 .cse3) (or .cse0 .cse7 .cse1 .cse2) (or .cse4 .cse5 .cse7 .cse2 .cse6))) [2023-11-06 22:39:42,285 INFO L899 garLoopResultBuilder]: For program point L824-2(lines 824 828) no Hoare annotation was computed. [2023-11-06 22:39:42,285 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2023-11-06 22:39:42,285 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2023-11-06 22:39:42,286 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 649 673) the Hoare annotation is: (let ((.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (< 1 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8 .cse2) (or .cse5 .cse6 .cse7 .cse2 .cse3) (or .cse0 .cse8 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,286 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 547 560) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0))) (let ((.cse0 (< 1 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse8 (and .cse9 (<= ~waterLevel~0 1))) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse2) (or .cse5 .cse6 .cse7 .cse4 .cse2 .cse8) (or .cse5 .cse6 .cse7 .cse2 .cse8 .cse3)))) [2023-11-06 22:39:42,286 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 815 833) the Hoare annotation is: (let ((.cse10 (= |old(~pumpRunning~0)| 0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (and .cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse6 (not .cse10)) (.cse7 (and .cse9 (<= ~waterLevel~0 1) .cse10)) (.cse0 (< 1 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse2 .cse3 .cse7) (or .cse4 .cse5 .cse6 .cse8 .cse2 .cse7) (or .cse0 .cse8 .cse1 .cse2)))) [2023-11-06 22:39:42,287 INFO L895 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse6 .cse7 .cse2) (or .cse0 .cse7 .cse1 .cse2 .cse4))) [2023-11-06 22:39:42,287 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2023-11-06 22:39:42,287 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2023-11-06 22:39:42,287 INFO L899 garLoopResultBuilder]: For program point L551(lines 551 557) no Hoare annotation was computed. [2023-11-06 22:39:42,288 INFO L899 garLoopResultBuilder]: For program point L741(lines 741 747) no Hoare annotation was computed. [2023-11-06 22:39:42,288 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 726 733) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (< ~methaneLevelCritical~0 1)) (.cse6 (< 1 ~waterLevel~0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= 0 ~systemActive~0))) (and (let ((.cse2 (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (.cse3 (= ~pumpRunning~0 1))) (or .cse0 .cse1 (and (<= ~waterLevel~0 1) .cse2 .cse3) .cse4 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) .cse2 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) .cse3) .cse5)) (or .cse6 .cse7 .cse5 .cse8) (or .cse0 .cse1 .cse5 .cse8) (or .cse6 .cse4 .cse7 .cse5))) [2023-11-06 22:39:42,288 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse9 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (< 1 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (not .cse9)) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) .cse9)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse7 (and (= ~pumpRunning~0 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse2 .cse7 .cse3) (or .cse0 .cse8 .cse1 .cse2) (or .cse4 .cse5 .cse6 .cse8 .cse2 .cse7)))) [2023-11-06 22:39:42,289 INFO L895 garLoopResultBuilder]: At program point L741-2(lines 734 750) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse12 (< ~methaneLevelCritical~0 1)) (.cse3 (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (.cse10 (< 1 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |old(~pumpRunning~0)| 1))) (.cse9 (= 0 ~systemActive~0))) (and (let ((.cse4 (= ~pumpRunning~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 (and .cse6 .cse3 .cse7 .cse8 .cse4) .cse9)) (or .cse10 .cse11 .cse9 .cse12) (let ((.cse13 (not .cse3))) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse13 .cse6 .cse7 .cse8) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse2) .cse9 .cse12)) (or .cse10 .cse5 .cse11 .cse9))) [2023-11-06 22:39:42,289 INFO L899 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2023-11-06 22:39:42,289 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 482 493) no Hoare annotation was computed. [2023-11-06 22:39:42,289 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 482 493) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse0 (< 1 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= ~pumpRunning~0 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse3 .cse4 .cse6) (or .cse2 .cse7 .cse3 .cse4 .cse5))) [2023-11-06 22:39:42,290 INFO L899 garLoopResultBuilder]: For program point L486-1(lines 482 493) no Hoare annotation was computed. [2023-11-06 22:39:42,290 INFO L902 garLoopResultBuilder]: At program point L764(line 764) the Hoare annotation is: true [2023-11-06 22:39:42,290 INFO L899 garLoopResultBuilder]: For program point L764-1(line 764) no Hoare annotation was computed. [2023-11-06 22:39:42,290 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 759 769) no Hoare annotation was computed. [2023-11-06 22:39:42,290 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 759 769) the Hoare annotation is: true [2023-11-06 22:39:42,291 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 759 769) no Hoare annotation was computed. [2023-11-06 22:39:42,294 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:39:42,297 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:39:42,354 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:39:42 BoogieIcfgContainer [2023-11-06 22:39:42,355 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:39:42,355 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:39:42,355 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:39:42,356 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:39:42,356 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:39:16" (3/4) ... [2023-11-06 22:39:42,359 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:39:42,363 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:39:42,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:39:42,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:39:42,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:39:42,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:39:42,364 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:39:42,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:39:42,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:39:42,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:39:42,365 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:39:42,376 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:39:42,377 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:39:42,378 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:39:42,379 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:39:42,379 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:39:42,411 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:39:42,411 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:39:42,411 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) [2023-11-06 22:39:42,412 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel)))) [2023-11-06 22:39:42,413 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1))) && ((((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:39:42,414 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((tmp___0 <= 1) && (\result <= 1))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((tmp == 0)))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) || ((((((((waterLevel <= 1) && (tmp___0 <= 1)) && (\old(pumpRunning) == 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) && !((0 == systemActive))) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((((((tmp == 0) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((((((((((waterLevel <= 1) && (\old(pumpRunning) == 1)) && (waterLevel <= \old(waterLevel))) && !((tmp == 0))) && !((0 == systemActive))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && !((tmp == 0))))) [2023-11-06 22:39:42,415 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) || (((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) || (((((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) [2023-11-06 22:39:42,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (\result <= 1)) && (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (((((waterLevel <= 1) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) && (pumpRunning == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)))) && ((((((((tmp == 0) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (\result == 1))) [2023-11-06 22:39:42,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((waterLevel <= 1) && (0 == tmp)) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || (((((1 <= \result) && (0 == tmp)) && (1 <= tmp)) && (\result == 0)) && (pumpRunning == 1))) || (0 == systemActive)) && ((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((((pumpRunning == 0) && !((0 == tmp))) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (((pumpRunning == \old(pumpRunning)) && !((0 == tmp))) && (waterLevel <= 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) [2023-11-06 22:39:42,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((waterLevel <= 1) && (0 == tmp)) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || (((((1 <= \result) && (0 == tmp)) && (1 <= tmp)) && (\result == 0)) && (pumpRunning == 1))) || (0 == systemActive)) && ((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) [2023-11-06 22:39:42,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (pumpRunning == 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (pumpRunning == 1))) [2023-11-06 22:39:42,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || ((pumpRunning == 0) && (waterLevel <= 1)))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 0))) || (0 == systemActive)) || ((pumpRunning == 0) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) [2023-11-06 22:39:42,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (pumpRunning == 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (pumpRunning == 1))) [2023-11-06 22:39:42,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || ((((\result == 1) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:39:42,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)))) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) [2023-11-06 22:39:42,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel)))) [2023-11-06 22:39:42,504 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:39:42,505 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:39:42,505 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) [2023-11-06 22:39:42,506 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel)))) [2023-11-06 22:39:42,506 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1))) && ((((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:39:42,507 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((tmp___0 <= 1) && (\result <= 1))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((tmp == 0)))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) || ((((((((waterLevel <= 1) && (tmp___0 <= 1)) && (\old(pumpRunning) == 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) && !((0 == systemActive))) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((((((tmp == 0) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((((((((((waterLevel <= 1) && (\old(pumpRunning) == 1)) && (waterLevel <= \old(waterLevel))) && !((tmp == 0))) && !((0 == systemActive))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && !((tmp == 0))))) [2023-11-06 22:39:42,507 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) || (((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) || (((((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) [2023-11-06 22:39:42,508 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (\result <= 1)) && (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (((((waterLevel <= 1) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) && (pumpRunning == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)))) && ((((((((tmp == 0) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (\result == 1))) [2023-11-06 22:39:42,508 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((waterLevel <= 1) && (0 == tmp)) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || (((((1 <= \result) && (0 == tmp)) && (1 <= tmp)) && (\result == 0)) && (pumpRunning == 1))) || (0 == systemActive)) && ((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((((pumpRunning == 0) && !((0 == tmp))) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (((pumpRunning == \old(pumpRunning)) && !((0 == tmp))) && (waterLevel <= 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) [2023-11-06 22:39:42,508 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((waterLevel <= 1) && (0 == tmp)) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || (((((1 <= \result) && (0 == tmp)) && (1 <= tmp)) && (\result == 0)) && (pumpRunning == 1))) || (0 == systemActive)) && ((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) [2023-11-06 22:39:42,509 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (pumpRunning == 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (pumpRunning == 1))) [2023-11-06 22:39:42,509 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || ((pumpRunning == 0) && (waterLevel <= 1)))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 0))) || (0 == systemActive)) || ((pumpRunning == 0) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) [2023-11-06 22:39:42,510 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (pumpRunning == 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (pumpRunning == 1))) [2023-11-06 22:39:42,512 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || ((((\result == 1) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:39:42,512 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)))) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) [2023-11-06 22:39:42,513 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel)))) [2023-11-06 22:39:42,543 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:39:42,544 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:39:42,544 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:39:42,546 INFO L158 Benchmark]: Toolchain (without parser) took 27171.61ms. Allocated memory was 159.4MB in the beginning and 337.6MB in the end (delta: 178.3MB). Free memory was 111.2MB in the beginning and 281.8MB in the end (delta: -170.6MB). Peak memory consumption was 9.6MB. Max. memory is 16.1GB. [2023-11-06 22:39:42,547 INFO L158 Benchmark]: CDTParser took 0.38ms. Allocated memory is still 159.4MB. Free memory is still 131.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:39:42,551 INFO L158 Benchmark]: CACSL2BoogieTranslator took 688.21ms. Allocated memory is still 159.4MB. Free memory was 111.2MB in the beginning and 91.5MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-06 22:39:42,552 INFO L158 Benchmark]: Boogie Procedure Inliner took 119.16ms. Allocated memory is still 159.4MB. Free memory was 91.5MB in the beginning and 89.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:39:42,553 INFO L158 Benchmark]: Boogie Preprocessor took 44.42ms. Allocated memory is still 159.4MB. Free memory was 89.4MB in the beginning and 87.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:39:42,553 INFO L158 Benchmark]: RCFGBuilder took 732.76ms. Allocated memory is still 159.4MB. Free memory was 87.3MB in the beginning and 69.1MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:39:42,554 INFO L158 Benchmark]: TraceAbstraction took 25384.91ms. Allocated memory was 159.4MB in the beginning and 337.6MB in the end (delta: 178.3MB). Free memory was 68.4MB in the beginning and 290.2MB in the end (delta: -221.7MB). Peak memory consumption was 143.8MB. Max. memory is 16.1GB. [2023-11-06 22:39:42,555 INFO L158 Benchmark]: Witness Printer took 190.50ms. Allocated memory is still 337.6MB. Free memory was 290.2MB in the beginning and 281.8MB in the end (delta: 8.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:39:42,559 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.38ms. Allocated memory is still 159.4MB. Free memory is still 131.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 688.21ms. Allocated memory is still 159.4MB. Free memory was 111.2MB in the beginning and 91.5MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 119.16ms. Allocated memory is still 159.4MB. Free memory was 91.5MB in the beginning and 89.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.42ms. Allocated memory is still 159.4MB. Free memory was 89.4MB in the beginning and 87.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 732.76ms. Allocated memory is still 159.4MB. Free memory was 87.3MB in the beginning and 69.1MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 25384.91ms. Allocated memory was 159.4MB in the beginning and 337.6MB in the end (delta: 178.3MB). Free memory was 68.4MB in the beginning and 290.2MB in the end (delta: -221.7MB). Peak memory consumption was 143.8MB. Max. memory is 16.1GB. * Witness Printer took 190.50ms. Allocated memory is still 337.6MB. Free memory was 290.2MB in the beginning and 281.8MB in the end (delta: 8.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [58] - GenericResultAtLocation [Line: 95]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [95] - GenericResultAtLocation [Line: 461]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [461] - GenericResultAtLocation [Line: 570]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [570] - GenericResultAtLocation [Line: 608]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [608] - GenericResultAtLocation [Line: 861]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [861] - GenericResultAtLocation [Line: 929]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [929] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 25.2s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 10.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3522 SdHoareTripleChecker+Valid, 5.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3490 mSDsluCounter, 4570 SdHoareTripleChecker+Invalid, 4.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3437 mSDsCounter, 1238 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5242 IncrementalHoareTripleChecker+Invalid, 6480 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1238 mSolverCounterUnsat, 1133 mSDtfsCounter, 5242 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 650 GetRequests, 424 SyntacticMatches, 7 SemanticMatches, 219 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3169 ImplicationChecksByTransitivity, 3.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=906occurred in iteration=9, InterpolantAutomatonStates: 192, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 12 MinimizatonAttempts, 115 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2597 PreInvPairs, 2946 NumberOfFragments, 3041 HoareAnnotationTreeSize, 2597 FomulaSimplifications, 7192 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 51 FomulaSimplificationsInter, 10871 FormulaSimplificationTreeSizeReductionInter, 7.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.2s InterpolantComputationTime, 827 NumberOfCodeBlocks, 827 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 919 ConstructedInterpolants, 0 QuantifiedInterpolants, 1929 SizeOfPredicates, 6 NumberOfNonLiveVariables, 601 ConjunctsInSsa, 30 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 96/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((waterLevel <= 1) && (0 == tmp)) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || (((((1 <= \result) && (0 == tmp)) && (1 <= tmp)) && (\result == 0)) && (pumpRunning == 1))) || (0 == systemActive)) && ((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) || (((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) || (((((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (\result <= 1)) && (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (((((waterLevel <= 1) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) && (pumpRunning == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)))) && ((((((((tmp == 0) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (\result == 1))) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((\old(waterLevel) == waterLevel) && (pumpRunning == 1))) && ((((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 592]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((tmp___0 <= 1) && (\result <= 1))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((tmp == 0)))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((((((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) || ((((((((waterLevel <= 1) && (tmp___0 <= 1)) && (\old(pumpRunning) == 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)) && !((0 == systemActive))) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((((((tmp == 0) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((((((((((waterLevel <= 1) && (\old(pumpRunning) == 1)) && (waterLevel <= \old(waterLevel))) && !((tmp == 0))) && !((0 == systemActive))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && !((tmp == 0))))) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (pumpRunning == 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (pumpRunning == 1))) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: (((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((waterLevel <= 1) && (0 == tmp)) && (pumpRunning == 1))) || !((methaneLevelCritical == 0))) || (((((1 <= \result) && (0 == tmp)) && (1 <= tmp)) && (\result == 0)) && (pumpRunning == 1))) || (0 == systemActive)) && ((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (((((pumpRunning == 0) && !((0 == tmp))) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (((pumpRunning == \old(pumpRunning)) && !((0 == tmp))) && (waterLevel <= 1))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: ((((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (pumpRunning == 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1))) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (pumpRunning == 1))) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || ((((\result == 1) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) && (pumpRunning == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive))) && (((!((methaneLevelCritical == 0)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && (((((((waterLevel <= 1) && (waterLevel <= \old(waterLevel))) && (pumpRunning == 1)) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: (((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || ((pumpRunning == 0) && (waterLevel <= 1)))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 0))) || (0 == systemActive)) || ((pumpRunning == 0) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((((((1 < waterLevel) || !((\old(pumpRunning) == 1))) || (0 == systemActive)) || (methaneLevelCritical < 1)) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || (0 == systemActive)) || (methaneLevelCritical < 1)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)))) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)))) && ((((1 < waterLevel) || !((methaneLevelCritical == 0))) || !((\old(pumpRunning) == 1))) || (0 == systemActive))) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || (((((((1 <= methaneLevelCritical) && (\result == 1)) && (tmp == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) && (pumpRunning == 1))) || (((((((methaneLevelCritical == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive))) && (pumpRunning == 1))) - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:39:42,663 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_80ad9dac-103e-4654-ae39-4b956f0256aa/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE